Known vulnerabilities in Foxit PDF Editor (formerly Foxit PhantomPDF) - page 17
Vendor:
Foxit Software Inc.
Software CPE:
cpe:2.3:a:foxit_software:foxit_phantompdf:*:*:*:*:*:*:*:*
Website:
https://www.foxitsoftware.com/
Total vulnerabilities:
649
Public exploits:
5
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2026.1.3.70306
2026.1.3.36551
14.0.6.69341
14.0.6.33584
13.2.6.63484
13.2.6.24111
2026.1.2.70304
2026.1.2.36540
14.0.5.69339
14.0.5.33580
13.2.5.63482
13.2.5.24109
2026.1.1.70276
2026.1.1.36485
14.0.4.33508
13.2.4.24048
2026.1.0.70169
2026.1.0.36452
14.0.3.69295
14.0.3.33502
13.2.3.63444
13.2.3.24041
2025.3.0.69570
2025.3.0.35737
14.0.2.69164
14.0.2.33402
13.2.2.63349
13.2.2.24014
2025.2.1.69005
2025.2.1.33197
14.0.1.69005
14.0.1.33197
13.2.1.63315
13.2.1.23955
13.2.0.63256
13.2.0.23874
2025.2.0.68868
2025.2.0.33046
14.0.0.68868
14.0.0.33046
13.2.0.63027
13.2.0.23637
2025.1.0.66692
2025.1.0.27937
13.1.7.63027
13.1.7.23637
2024.4.1.66479
2024.4.1.27687
13.1.6.63007
13.1.6.23570
2024.4.0.66473
2024.4.0.27683
13.1.5.63001
13.1.5.23566
12.1.9.15762
12.1.7.55606
11.2.12.54161
11.1.11.1202
12.1.6.55574
11.2.11.54113
11.1.10.1010
12.1.8.15703
2024.3.0.65538
2024.3.0.26795
13.1.4.62748
13.1.4.23147
2024.2.3.64402
2024.2.3.25184
13.1.3.22478
12.1.7.15526
11.2.10.53951
13.1.2.62201
13.1.2.22442
12.1.5.55449
11.1.9.0524
2024.2.2.64388
2024.2.2.25170
13.1.1.22432
2024.2.1.64379
2024.2.1.25153
13.1.1.62190
12.1.6.15509
12.1.4.55444
11.1.8.0513
2024.2.0.64371
2024.2.0.25138
13.1.0.62175
13.1.0.22420
12.1.5.15505
12.1.3.55436
11.2.9.53938
11.1.7.0418
2024.1.0.63682
2024.1.0.23997
12.1.4.15400
11.2.8.53842
12.1.2.55366
11.1.6.0109
2023.3.0.23028
2023.3.23028
2023.3.0.63083
13.0.1.21693
13.0.1.61866
11.2.7.53812
11.1.5.0913
2023.2.0.61611
2023.2.0.21408
13.0.0.61829
13.0.0.21632
12.1.1.55342
12.1.3.15356
10.1.12.37872
11.2.6.53790
2023.1.0.55583
2023.1.0.15510
12.1.2.15332
10.1.11.37866
11.2.5.53785
12.1.1.15289
12.1.0.1229
8.3.11.45106
10.1.10.37854
11.2.4.53774
12.1.0.15250
11.1.4.1121
12.0.2.12465
12.0.2.1028
11.1.3.0920
10.1.9.37808
11.2.3.53593
12.0.1.12430
12.0.1.0720
12.0.0.12394
12.0.0.0601
10.1.8.37795
11.2.2.53575
11.1.2.0420
10.1.7.37777
11.2.1.53537
11.1.1.0126
10.1.6.37749
11.2.0.53415
11.1.0.52543
11.1.0.0925
10.1.5.37672
11.0.1.49938
11.0.1.0719
11.0.0.0510
11.0.0.49893
10.1.4.37651
10.1.3.37598
4.1.3.0129
9.7.5.29616
10.1.1
10.1.1.37576
4.1.0.1023
4.1.1
4.1.1.1123
9.7.4.29600
4.1.0.0926
10.1.0.37527
9.7.3.29555
10.0.1.35811
10.0.1
7.3.9.0816
2.1
10.0.0.35798
4.0.0.0430
9.7.2.29539
9.7.1.29511
8.3.12.47136
8.3.12
9.7.0.29478
3.4.0.1012
8.3.10
9.6.0.25114
9.5.0.20723
9.4.1.16828
9.4.0.16811
9.0.1.31049
9.0.0.29935
8.3.9.41099
8.3.8.39677
8.3.7.38093
8.3.1.21155
8.1.0.1013
8.0.0.624
7.3.17.906
7.3.4.0311
7.3.0.0118
7.2.2.0929
7.2.0.0722
7.1.5.425
7.1.0.306
7.0.6.1126
7.0.3.916
6.2.1.0168
6.2.0.0429
6.1.2.1227
6.1.1.1025
6.0.7.0806
6.0.5.0618
6.0.2.0413
5.4.3.1106
5.4.2.0918
5.4.0.0902
5.2.1.0615
5.2.0.0502
5.1.2.0305
5.1.1.1214
5.0.3.0811
5.0.2.0721
3.3.0.0709
3.2.0.0404
3.1.0.0111
3.0.1.1116
3.0.0.0818
2.2.3
2.2.1
2.2
2.1.1
2.0
1.0.2
8.3.11
8.3.10.42705
9.4
9.3.0.10826
9.3
9.2.0.9297
8.3.7
8.3.6.35572
9.2
9.1.0.5096
8.3.6
8.3.5.30351
9.1
9.0.1.1049
8.3.5
9.0
8.3.2.25013
7.3.15.712
7.3.15
7.3.13.421
8.3.1
8.3.0.14878
7.3.13
7.3.11.1122
8.3
8.2.1.6871
8.2.1
8.2.0.2192
8.2
8.1.1.1115
8.0.2.805
8.0.1
8.0
8.0.2
7.3.0.118
7.3.4.311
Vulnerabilities (649)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU53684 - Type confusion CVE-2021-31476 |
CWE-843 | High | 10.1.4.37651 | 01.06.2021 |
SB2021050625 |
||
| #VU52958 - Heap-based Buffer Overflow |
CWE-122 | High | 10.1.4.37651 | 06.05.2021 |
SB2021050625 |
||
| #VU52957 - Use of Uninitialized Variable |
CWE-457 | Low | 10.1.4.37651 | 06.05.2021 |
SB2021050625 |
||
| #VU52956 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CWE-89 | Low | 10.1.4.37651 | 06.05.2021 |
SB2021050625 |
||
| #VU52955 - Files or Directories Accessible to External Parties |
CWE-552 | High | 10.1.4.37651 | 06.05.2021 |
SB2021050625 |
||
| #VU51621 - Memory corruption CVE-2021-27271 |
CWE-119 | High | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51619 - Out-of-bounds write CVE-2021-27269 |
CWE-787 | High | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51618 - Use After Free CVE-2021-27268 |
CWE-416 | High | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51617 - Use After Free CVE-2021-27267 |
CWE-416 | High | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51616 - Out-of-bounds read CVE-2021-27266 |
CWE-125 | Medium | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51615 - Out-of-bounds read CVE-2021-27265 |
CWE-125 | Medium | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51614 - Out-of-bounds read CVE-2021-27264 |
CWE-125 | Medium | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51613 - Out-of-bounds read CVE-2021-27263 |
CWE-125 | Medium | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51612 - Out-of-bounds read CVE-2021-27262 |
CWE-125 | Medium | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51611 - Out-of-bounds read CVE-2021-27261 |
CWE-125 | Medium | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU51590 - Out-of-bounds read CVE-2021-27270 |
CWE-125 | Medium | 10.1.3.37598 | 22.03.2021 |
SB2021032205 |
||
| #VU48905 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) |
CWE-451 | Medium | 9.7.5.29616, 10.1.1.37576 | 09.12.2020 |
SB2020120906 |
||
| #VU48904 - Out-of-bounds write CVE-2020-27860 |
CWE-787 | High | 9.7.5.29616, 10.1.1.37576 | 09.12.2020 |
SB2020120906 |
||
| #VU48899 - Use After Free CVE-2020-13548 |
CWE-416 | High | 9.7.5.29616, 10.1.1.37576 | 09.12.2020 |
SB2020120906 |
||
| #VU48898 - Type confusion CVE-2020-13547 |
CWE-843 | High | 9.7.5.29616, 10.1.1.37576 | 09.12.2020 |
SB2020120906 |
Showing elements 321 - 340 out of 649